FAQ
Frequently Asked Questions
The most common questions from professionals like you.
Compliance
01 / 06What are you actually selling, backup or compliance?
Managed backup, restore testing, retention controls, and service-specific technical evidence. These support your own obligations but are not legal advice or a guarantee of overall compliance.
I already have a data-protection programme. Why do I need you?
The service does not assess or certify your overall compliance. We provide the ArvaSafe DPA, evidence of our Article 32 technical measures, and restore-test records that you can incorporate into your wider programme.
What happens if the Hellenic DPA audits me?
We provide documentation of the technical and organisational measures ArvaSafe applies to the specific service and support questions limited to that scope.
Do you cover compliance for my whole business?
No. We cover the operation and documentation of the backup service, restore tests, and the agreed retention schedule. We do not replace a DPO, GDPR adviser, accountant, or lawyer.
Storage & Pool
02 / 06How does the 500 GB per workstation pool work?
Each workstation you pay for adds 500 GB to your account's total allowance. With 5 workstations, you have 2.5 TB to use however you like, e.g. one engineer might use 800 GB while others use less.
What counts toward the 500 GB?
All files you choose to keep a copy of. Encryption overhead and metadata are not billed.
What happens if I exceed the pool?
We notify you in advance at 80% and 95%. You can either add another workstation (which increases the pool by 500 GB), or agree on pro-rata billing for the extra space.
Technical
03 / 06Do you cover Microsoft 365 / Google Workspace?
We back up the files on your workstations, including local mail data files (e.g. Outlook PST) stored on the machine. We do not connect to and back up cloud mailboxes or drives (Microsoft 365, Google Workspace) directly — those services are outside the scope of the service. If you keep local copies on a workstation, they are covered like any other file.
How long does a restore take?
Recovery objectives, priorities, and the type of restore support are defined in the Order Form and applicable contract documents. Actual timing also depends on data volume and destination.
Where is my data stored?
The selected content-storage region and relevant providers are recorded in the Order Form and DPA. Limited management or support data may be processed by the disclosed sub-processors.
Is it encrypted?
Yes. Data is encrypted with AES-256 before upload. Storage and platform providers do not hold the decryption keys. Authorised ArvaSafe personnel may use the protected key only for an approved restore or technical-support case, with restricted and logged access.
Billing
04 / 06How do I cancel?
For a monthly plan, cancel at any time: service continues to the end of the current paid period, does not renew, and there is no partial refund. For an annual plan, give written non-renewal notice at least 60 days before renewal. We arrange data export before deletion.
Do you issue invoices?
Yes. We issue legal invoices for every charge. Payment by bank transfer or card.
Onboarding
05 / 06How long does setup take?
Usually 3-5 business days from signing. On day one we sign the DPA and deliver the documents. We then schedule remote agent installation.
Do I have to stop working?
No. Installation is remote and backups run at a time that doesn't affect you (typically overnight).
Security
06 / 06What if ArvaSafe shuts down?
ArvaSafe manages the keys and follows the exit process set out in the contract and agreed exit plan, including delivery of the information needed for restoration.
Who has access to my data?
ArvaSafe manages the keys. Only the founder and named authorised support engineers can access decrypted content, solely for a restore or support case you requested. All actions are logged.
Do you have certifications?
The founder personally holds CompTIA Security+. Infrastructure-provider certifications are shown only after verification for the specific provider and do not certify ArvaSafe or the customer's overall compliance.
